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intication system comprising: 

: configured to provide access to the Intemet from a public 

uthentication component communicatively linked with the 
ifigured to enable authentication of individual users so that 
Intemet through the host network, authentication being 
ace in a manner that is independent of any user affiliation 
ice Providers (ISPs); 

access module communicatively linked with the one 
ment and configured to enable a user to access the host 

on database communicatively linked to the host network and 
lation that can be used to authenticate a user. 

^m of claim 1, wherein the authentication database comprises 
luthentication database. 

em of claim 2, wherein the user authenticates directly with 
abase. 

sm of claim 3, wherein the one authentication component is 
ser directly to the authentication database. 
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5. The syst^ of claim 3, wherein the one authentication component is 
not privy to any auth mtication infomiation that passes between the user and the 
authentication database. 



' 6. The 
the user and the authentication 



syste^ of claim 3, wherein authentication takes place between 
database in a secure manner. 



7. The systeri 
secure socket link (SSL) 



8. The syste^ 
configured to notify the 
properly authenticated 



of claim 6, wherein the authentication takes place using 
techniques. 



of claim 3, wherein the authentication database is 
one authentication component when a user has been 



9. The syster|i 
configured to provide u$er 
the user has been authen 



of claim 8, wherein the authentication database is 
information to the one authentication component after 
icated. 



10. The systeni of claim 9, wherein the user information that is provided 
by the authentication database comprises billing information. 



11. The system of claim 1, wherein the authentication database 
comprises a locally accessible authentication database. 
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12. The sys 
configured to issue a 
the authentication 
packets that can be 



em of claim 1, wherein the one authentication component is 
unique token to each user once the user is authenticated by 
dat base, the unique token being provided for use with data 
transmitted from each user. 



13. The 
to enable the user to 



at least one host 



syst m of claim 1, wherein the one access module is configured 
wi 'elessly access the host network. 



14. An authentication system for providing authentication for users who 
desire to access the Internet, the system comprising: 

organization network configured to access the Intemet, the 
host organization network comprising one or more subnets each of which 
comprising: 

server configured to receive data packets from individual 
and transmit the data packets to the Intemet; and 
of public access points each of which configured to 
nication from a user that is using a client computing 
device to wirelessly trailsmit data packets that are intended for the Internet and 
provide the wirelessly transmitted data packets to the one server before the data 
packets are transmitted to! the Intemet; and 

at least one globally accessible authentication database that contains 
information that can be used by the database to authenticate a user. 



at least on 
client computing devices 

a pluralit> 
receive wireless commi 
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15. The system of claim 14, wherein the user authenticates directly with 
the globally accessible authentication database. 



16. The 

authentication i 
the globally accessiblje 



system of claim 14, wherein the one server is not privy to 
infomijation that is passed between the client computing device and 
authentication database. 



17. The sy^te 
the client computing 
secure manner. 



18. The s> 

secure socket layer 



19. The 

authentication 
authenticated. 



m of claim 14, wherein authentication takes place between 
device and the globally accessible database in an end-to-end 



stem of claim 17, wherein the secure manner comprises 
techniques. 



(SSL) 



system of claim 14, wherein the globally accessible 
database is configured to notify the one server when a user has been 



20. The 

authentication 
when the user has 



system of claim 19, wherein the globally accessible 
databalse is configured to provide user information to the one server 
be4n authenticated. 
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\ 

21. The system of claim 20, wherein the user inforaiation that is 



provided to the one 



comprises bilUng infoi mation. 



22. The 
Internet Service 



system of claim 14, wherein the user is unaffiliated with any 
Provibers (ISPs). 



wireless 



23. An autl 
desire to access the 
multiple wi 
multiple access 
a server confi 
access points, the 

at least one g 
that can be used to 



server 



server by the globally accessible authentication database 



entication system for providing authentication for users who 
Intemet, the system comprising: 

nodes through which the Intemet can be accessed; 
points with which the wireless nodes can communicate; 

to receive wireless communication from the multiple 
configured to enable authentication of various users; and 
l6bal authentication database that contains user information 
authenticate the users. 



figured 



24. The syst jm of claim 23, wherein the server is configured to enable a 
user to log directly onto the one global authentication database. 



25. The system of claim 24, wherein the server is configured to present 
a web page having a linik to the one global authentication database. 



V 
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26. The system of claim 24, wherein the server is not privy to any of the 
authentication infomiation that gets passed between the user and the one global 
authentication database. 

27. The s>fetem of claim 24, wherein the one global authentication 
database is configured to notify the server after the user has been authenticated. 

28. The system of claim 27, wherein the one global authentication 
database is configurejl to provide user information to the server after the user has 
been authenticated by^the global authentication database. 

29. The system of claim 23, wherein the server is configured to issue a 
unique token to the user after the user is authenticated. 

30. The sysltem of claim 29, wherein the server encrypts the unique 
token before issuing it to the user. 

31. The sysiem of claim 23, wherein the multiple access points are 
arranged to define a wireless subnet. 

32. The system of claim 23, wherein the multiple access points are 
deployed in a publicly accessible area. 
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33. The sXtem of claim 23, wherein the muhiple wireless nodes 
comprise mobile computing devices. 

34. A met iod of authenticating a user for Internet access, the method 
comprising: 

establishing a communication link between a mobile computing device and 
a server that is configured to provide Internet access; 

contacting a global authentication database that contains user information 
that can be used to authenticate one or more users; 

authenticating a user using the information that is contained in the global 
authentication database; 

notifying the s ^rver that the user has been authenticated; and 

issuing a unique token to the user for use when sending data packets to the 
server for transmission to the Internet. 



hod of claim 34, wherein the communication link comprises 



35. The me 
at least one wireless link 



36. The method of claim 34, wherein the communication link comprises 
a wireless link that includes the mobile computing device. 



37. The met lod of claim 34, wherein the communication link comprises 



a wireless link that incl 



ides the server. 
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38. The 

a wireless link that 



meihod of claim 34, wherein the communication link comprises 
includes both the mobile computing device and the server. 



39. The mithod 
authenticating the user 



of claim 34, wherein said authenticating comprises 
using a secure protocol. 



40. The mdthod 
authentication inforrqation 
database. 



41. The mithod 
publicly deployed am 



42. One or more computer-readable media having computer-readable 



instructions thereon 
computers to: 

establish a w 



authenticate a 
authentication databa 



of claim 39, wherein the server is not privy to any 
that passes between the user and the authentication 



of claim 34, wherein the server comprises part of a 
accessible host network. 



vhich, when executed by one or more computers, cause the 



ireless communication link between a mobile computing 
device and a server that is configured to provide Internet access; 

contact a global authentication database that contains user information that 
can be used to authenjticate one or more users; 

user using the information that is contained in the global 
Be: 



notify the server that the user has been authenticated; and 



issue a unique 



server for transmissioi i to the Internet 



token to the user for use when sending data packets to the 
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43. A meyhod of authenticating a user for Internet access, the method 
comprising: 

configuring : nultiple access points to receive wireless communication from 
multiple wireless nDdes through which the Internet can be accessed, the multiple 
wireless nodes being capable of communicating data packets that are intended for 
Internet; 

a server to wirelessly receive the data packets that are 



transmission to the 
configuring 



communicated to tl e multiple access points; and 



configuring 



can be used to authenticate one or more users that desire to access the Internet. 



44. The 

accessible databas(s 



45. The 

user directly to the 

46. The 

user directly to the 
of the purview of 



a globally accessible database that includes information that 



method of claim 43 further comprising using the globally 
to authenticate one or more users. 



method of claim 44, wherein said using comprises linking the 
globally accessible database. 

method of claim 44, wherein said using comprises linking the 
globally accessible database and authenticating the user outside 
tftie server. 
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47. The meihod 
user directly to the glc bally 
user has been authentii^ated 



of claim 44, wherein said using comprises linking the 
accessible database and notifying the server when the 



48. The method of claim 44 further comprising issuing a user, once 
authenticated, a uniqui token that uniquely identifies that user. 

49. The metiod of claim 43, wherein at least some of the wireless nodes 
comprise mobile computing devices. 
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